rayhpeng ed336ec3dd

fix(gateway): enforce run-create authorization on stateless endpoints (#5030) ...

* fix(gateway): enforce authz on stateless runs

* fix(gateway): guard scheduled run creation

2026-08-27 14:59:31 +08:00

..

__init__.py

feat(subagents): add unified capacity and durable batch execution (#4998)

2026-08-25 07:49:38 +08:00

agents.py

feat: add managed subagents and delegation scopes (#4887)

2026-08-24 11:04:23 +08:00

artifacts.py

feat(authz): enforce sandbox:execute authorization at sandbox acquisition (#4063 Phase 3) (#4911)

2026-08-24 16:32:06 +08:00

assistants_compat.py

feat(agents): database-backed storage for custom agent definitions (#4359)

2026-07-23 08:03:21 +08:00

auth.py

security: harden auth next-path validation (#4587)

2026-07-30 23:53:52 +08:00

browser.py

perf(frontend): bound delivery, bundles, and long-running UI work (#4622)

2026-08-01 22:19:59 +08:00

channel_connections.py

feat(channels): add Buzz (Nostr) channel connector (#4649)

2026-08-05 08:29:22 +08:00

channels.py

fix(channels): harden runtime credential management APIs (#3581)

2026-06-18 10:45:33 +08:00

console.py

fix(console): disable cost reporting when model pricing mixes currencies (#4564)

2026-07-29 22:24:04 +08:00

features.py

feat(subagents): add unified capacity and durable batch execution (#4998)

2026-08-25 07:49:38 +08:00

feedback.py

fix(gateway):unify thread id validation (#4589)

2026-08-01 19:42:44 +08:00

github_webhooks.py

fix(gateway): stop implying 200 webhook deliveries are unrecoverable (#4307)

2026-07-23 14:32:49 +08:00

input_polish.py

feat: add composer input polishing (#3986)

2026-07-08 17:10:27 +08:00

integrations.py

feat(integrations): support switching Lark app credentials (#4703)

2026-08-10 07:19:19 +08:00

mcp_tasks.py

fix(gateway): reject MCP task cancellation when the worker is stopped (#4963)

2026-08-24 06:57:55 +08:00

mcp.py

feat(mcp): map request-scoped secrets to MCP HTTP/SSE headers (#5010)

2026-08-27 10:42:42 +08:00

memory.py

feat(memory): add hybrid fact eviction policy (#4789)

2026-08-17 08:20:42 +08:00

models.py

feat(authz): enforce model authorization at Gateway routes and runtime (#4063 Phase 3) (#4540)

2026-08-01 22:34:11 +08:00

runs.py

fix(gateway): enforce run-create authorization on stateless endpoints (#5030)

2026-08-27 14:59:31 +08:00

scheduled_tasks.py

fix(gateway): enforce run-create authorization on stateless endpoints (#5030)

2026-08-27 14:59:31 +08:00

skills.py

fix(docker): let the Gateway write extensions_config.json in production (#4852)

2026-08-23 15:08:39 +08:00

subagent_batches.py

feat(subagents): add unified capacity and durable batch execution (#4998)

2026-08-25 07:49:38 +08:00

subagents.py

feat: add managed subagents and delegation scopes (#4887)

2026-08-24 11:04:23 +08:00

suggestions.py

fix(gateway):unify thread id validation (#4589)

2026-08-01 19:42:44 +08:00

thread_runs.py

fix(gateway): stamp turn_duration on last AI message only in /messages/page (#4755)

2026-08-11 22:00:57 +08:00

threads.py

feat(threads): distinguish branched conversations (#4983)

2026-08-25 08:29:18 +08:00

uploads.py

feat(authz): enforce sandbox:execute authorization at sandbox acquisition (#4063 Phase 3) (#4911)

2026-08-24 16:32:06 +08:00